This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB9EF/878723E6C84F11F08BEBCD0BC4F9AE02/NPRnbAZjg5FHlz1MhptJ3IxmQPM.mft File: NPRnbAZjg5FHlz1MhptJ3IxmQPM.mft (raw, json) Hash identifier: UIXI35V3rykIPU0aoC3KSmNAUML4I+3+/9beUYaB9qo= Subject key identifier: B6:3A:DC:CF:5D:88:0B:8E:53:B4:49:A7:AB:2E:D2:67:B3:AD:C1:BB Authority key identifier: 34:F4:67:6C:06:63:83:91:47:97:3D:4C:86:9B:49:DC:8C:66:40:F3 Certificate issuer: /CN=A91BB9EF/serialNumber=34F4676C0663839147973D4C869B49DC8C6640F3 Certificate serial: 14 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NPRnbAZjg5FHlz1MhptJ3IxmQPM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB9EF/878723E6C84F11F08BEBCD0BC4F9AE02/NPRnbAZjg5FHlz1MhptJ3IxmQPM.mft Manifest number: 12 Signing time: Tue 23 Dec 2025 06:47:33 +0000 Manifest this update: Tue 23 Dec 2025 06:47:32 +0000 Manifest next update: Tue 30 Dec 2025 06:47:32 +0000 Files and hashes: 1: NPRnbAZjg5FHlz1MhptJ3IxmQPM.crl (hash: E065vnc24n2owOIg6oeXArP+7aU/hLwNR2Lg/nmphJ4=) 2: E57517B0C84F11F0B9AA990CC4F9AE02.roa (hash: APz1fq2YwQ7yS7mDD19LwdpN2CTZ/bZgxloH7c0/wbA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB9EF/878723E6C84F11F08BEBCD0BC4F9AE02/NPRnbAZjg5FHlz1MhptJ3IxmQPM.crl rsync://rpki.apnic.net/member_repository/A91BB9EF/878723E6C84F11F08BEBCD0BC4F9AE02/NPRnbAZjg5FHlz1MhptJ3IxmQPM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NPRnbAZjg5FHlz1MhptJ3IxmQPM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:47:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20 (0x14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB9EF, serialNumber=34F4676C0663839147973D4C869B49DC8C6640F3 Validity Not Before: Dec 23 06:47:32 2025 GMT Not After : Dec 30 06:47:32 2025 GMT Subject: CN=694a3b04-8f5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:3c:ff:26:be:d9:55:24:20:a9:b7:1d:ed:92: a3:38:ff:f5:e1:6d:fe:18:39:6a:20:5f:8a:34:b6: 00:fc:6b:83:6c:af:dd:7f:52:e3:4c:d4:3c:c8:51: 98:ac:8a:f7:fe:ac:16:16:b2:f2:c6:d1:ba:98:10: 8a:40:82:bd:8c:62:d3:7f:8c:bb:39:4f:40:2e:9c: 03:33:34:48:30:5b:c2:5d:a8:da:a7:41:07:af:c4: 48:2c:5a:e1:b3:f4:bf:1c:41:74:1c:12:4b:7d:40: 94:68:b4:70:95:73:c6:75:6f:f0:e7:ea:6d:cf:b4: e4:ef:8e:90:1c:bb:1b:a8:3a:0a:42:c5:a6:f9:16: 4c:12:80:16:2e:78:58:f3:ee:55:d5:7f:00:5e:86: 7a:f6:63:d4:03:2f:c0:64:b2:83:cf:db:4f:b5:20: 5b:e3:e0:f5:bf:ab:36:e0:59:86:07:6f:59:3e:31: 9c:48:bb:52:ac:3c:95:9f:5a:0f:53:4a:cc:2e:8c: f9:cf:8a:e6:d9:09:1d:b6:aa:62:ba:ea:d8:70:20: 06:8a:95:bb:b3:79:7c:8f:c3:9a:83:d7:12:bd:0f: d9:eb:30:1f:ca:86:c3:d4:5a:36:46:a7:ff:5f:19: bb:f9:c4:e9:65:b3:95:68:15:87:6c:ce:d0:3c:f2: f5:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:3A:DC:CF:5D:88:0B:8E:53:B4:49:A7:AB:2E:D2:67:B3:AD:C1:BB X509v3 Authority Key Identifier: keyid:34:F4:67:6C:06:63:83:91:47:97:3D:4C:86:9B:49:DC:8C:66:40:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB9EF/878723E6C84F11F08BEBCD0BC4F9AE02/NPRnbAZjg5FHlz1MhptJ3IxmQPM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NPRnbAZjg5FHlz1MhptJ3IxmQPM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB9EF/878723E6C84F11F08BEBCD0BC4F9AE02/NPRnbAZjg5FHlz1MhptJ3IxmQPM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:51:0e:59:be:22:ce:6d:3f:28:40:ff:9e:b0:c6:96:8c:f1: 93:5f:2d:7f:72:ee:5f:b5:ec:cc:bf:b6:90:8f:4c:3b:96:25: 9c:b3:d7:a6:cc:38:b8:d3:f1:57:65:86:60:2a:18:8a:4a:4a: e5:7a:1b:9a:4d:ac:a6:43:6b:3b:8b:4c:d8:26:de:cf:f0:c3: 1a:dc:f1:f5:85:9b:d9:8a:15:dc:b8:a3:6b:c8:f5:0f:11:f5: 35:3c:85:c6:c3:fd:af:a4:fb:32:d5:57:68:10:3d:ac:49:82: 5d:98:1a:80:0e:02:5b:2f:98:4d:c1:4c:5a:b5:66:ee:75:ce: 2a:57:57:de:c8:86:ac:a6:2d:08:97:18:5b:9a:43:90:ac:b9: d4:b0:98:5b:a2:be:b9:b7:85:36:94:30:54:f3:ce:c8:81:c1: 08:0f:e9:66:4a:68:76:30:72:ec:37:60:22:08:7e:7d:68:82: 6f:5f:57:88:63:70:06:5a:68:79:8c:0b:d9:73:c3:e8:80:66: 80:54:42:a2:19:ce:5d:af:1d:54:be:ab:66:f1:23:6d:29:43: 5b:26:98:db:f4:7c:d3:ab:ed:8b:30:4f:72:45:24:3a:aa:b9: f4:a5:dc:fa:8e:3c:3e:2a:17:8a:ef:24:bf:11:f0:fc:db:79: 43:84:40:ea -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC QjlFRjExMC8GA1UEBRMoMzRGNDY3NkMwNjYzODM5MTQ3OTczRDRDODY5QjQ5REM4 QzY2NDBGMzAeFw0yNTEyMjMwNjQ3MzJaFw0yNTEyMzAwNjQ3MzJaMBgxFjAUBgNV BAMMDTY5NGEzYjA0LThmNWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCuPP8mvtlVJCCptx3tkqM4//Xhbf4YOWogX4o0tgD8a4Nsr91/UuNM1DzIUZis ivf+rBYWsvLG0bqYEIpAgr2MYtN/jLs5T0AunAMzNEgwW8JdqNqnQQevxEgsWuGz 9L8cQXQcEkt9QJRotHCVc8Z1b/Dn6m3PtOTvjpAcuxuoOgpCxab5FkwSgBYueFjz 7lXVfwBehnr2Y9QDL8BksoPP20+1IFvj4PW/qzbgWYYHb1k+MZxIu1KsPJWfWg9T SswujPnPiubZCR22qmK66thwIAaKlbuzeXyPw5qD1xK9D9nrMB/KhsPUWjZGp/9f Gbv5xOlls5VoFYdsztA88vXjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUtjrcz12I C45TtEmnqy7SZ7OtwbswHwYDVR0jBBgwFoAUNPRnbAZjg5FHlz1MhptJ3IxmQPMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJCOUVGLzg3ODcyM0U2Qzg0 RjExRjA4QkVCQ0QwQkM0RjlBRTAyL05QUm5iQVpqZzVGSGx6MU1ocHRKM0l4bVFQ TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTlBSbmJBWmpnNUZIbHoxTWhwdEozSXhtUVBNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJC OUVGLzg3ODcyM0U2Qzg0RjExRjA4QkVCQ0QwQkM0RjlBRTAyL05QUm5iQVpqZzVG SGx6MU1ocHRKM0l4bVFQTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJVRDlm+Is5tPyhA/56wxpaM8ZNfLX9y7l+17My/tpCPTDuWJZyz16bM OLjT8VdlhmAqGIpKSuV6G5pNrKZDazuLTNgm3s/wwxrc8fWFm9mKFdy4o2vI9Q8R 9TU8hcbD/a+k+zLVV2gQPaxJgl2YGoAOAlsvmE3BTFq1Zu51zipXV97IhqymLQiX GFuaQ5CsudSwmFuivrm3hTaUMFTzzsiBwQgP6WZKaHYwcuw3YCIIfn1ogm9fV4hj cAZaaHmMC9lzw+iAZoBUQqIZzl2vHVS+q2bxI20pQ1smmNv0fNOr7YswT3JFJDqq ufSl3PqOPD4qF4rvJL8R8PzbeUOEQOo= -----END CERTIFICATE-----Generated at Wed Dec 24 15:48:05 2025 by rpki-client